Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Docs: Fix allow-from markup/link #15201

Open
wants to merge 7 commits into
base: master
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2,070 changes: 744 additions & 1,326 deletions docs/changelog/pre-4.0.rst

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion docs/security-advisories/powerdns-advisory-2012-01.rst
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@ INPUT.
To solve this issue, we recommend upgrading to the latest packages
available for your system. Tarballs and new static builds (32/64bit,
RPM/DEB) of 2.9.22.5 and 3.0.1 have been uploaded to `our download
site <http://www.powerdns.com/content/downloads.html>`__. Kees
site <https://www.powerdns.com/downloads>`__. Kees
Monshouwer has provided updated CentOS/RHEL packages in `his
repository <http://www.monshouwer.eu/download/3th_party/>`__. Debian,
Fedora and SuSE should have packages available shortly after this
Expand Down
7 changes: 5 additions & 2 deletions docs/security-advisories/powerdns-advisory-2015-01.rst
Original file line number Diff line number Diff line change
Expand Up @@ -16,10 +16,13 @@ PowerDNS Security Advisory 2015-01: Label decompression bug can cause crashes or
- Solution: Upgrade to any of the non-affected versions
- Workaround: Run your Recursor under a supervisor. Exposure can be
limited by configuring the
```allow-from`` <../recursor/settings.md#allow-from>`__ setting so
|allow-from|_ setting so
only trusted users can query your nameserver. There is no workaround
for the Authoritative server.

.. |allow-from| replace:: ``allow-from``
.. _allow-from: :ref:`setting-allow-from`

A bug was discovered in our label decompression code, making it possible
for names to refer to themselves, thus causing a loop during
decompression. On some platforms, this bug can be abused to cause
Expand Down Expand Up @@ -49,7 +52,7 @@ clearly the CPU spike issues.
Update 7th of July 2015: Toshifumi Sakaguchi discovered that the
original fix was insufficient in some cases. Updated versions of the
Authoritative Server and Recursor `were
released <../changelog.md#powerdns-recursor-364>`__ on the 9th of June.
released <../changelog/pre-4.0.rst#powerdns-recursor-364>`__ on the 9th of June.
Minimal patches are
`available <http://downloads.powerdns.com/patches/2015-01/>`__. The
insufficient fix was assigned CVE-2015-5470.
4 changes: 2 additions & 2 deletions docs/security-advisories/powerdns-advisory-2015-02.rst
Original file line number Diff line number Diff line change
Expand Up @@ -25,12 +25,12 @@ PowerDNS Authoritative Server 3.4.0-3.4.5 are affected. No other
versions are affected. The PowerDNS Recursor is not affected.

`PowerDNS Authoritative Server
3.4.6 <../changelog.md#powerdns-authoritative-server-346>`__ contains a
3.4.6 <../changelog/pre-4.0.rst#powerdns-authoritative-server-346>`__ contains a
fix to this issue. A minimal patch is `available
here <https://downloads.powerdns.com/patches/2015-02/>`__.

This issue is entirely unrelated to `Security Advisory
2015-01 <powerdns-advisory-2015-01.md>`__/CVE-2015-1868.
2015-01 <powerdns-advisory-2015-01.rst>`__/CVE-2015-1868.

We'd like to thank Pyry Hakulinen and Ashish Shukla at Automattic for
finding and subsequently reporting this bug.
6 changes: 3 additions & 3 deletions docs/security-advisories/powerdns-advisory-2015-03.rst
Original file line number Diff line number Diff line change
Expand Up @@ -28,13 +28,13 @@ PowerDNS Authoritative Server 3.4.4 - 3.4.6 are affected. No other
versions are affected. The PowerDNS Recursor is not affected.

`PowerDNS Authoritative Server
3.4.7 <../changelog.md#powerdns-authoritative-server-347>`__ contains a
3.4.7 <../changelog/pre-4.0.rst#powerdns-authoritative-server-347>`__ contains a
fix to this issue. A minimal patch is `available
here <https://downloads.powerdns.com/patches/2015-03/>`__.

This issue is unrelated to the issues in our previous two Security
Announcements (`2015-01 <powerdns-advisory-2015-01.md>`__ and
`2015-02 <powerdns-advisory-2015-02.md>`__).
Announcements (`2015-01 <powerdns-advisory-2015-01.rst>`__ and
`2015-02 <powerdns-advisory-2015-02.rst>`__).

We'd like to thank Chris Hofstaedtler of Deduktiva GmbH for finding
and reporting this issue.
Loading
Loading